Firmware

Dell released a new BIOS firmware version 1.7.4 for the Latitude 7300 and 7400 on May 22, 2020. This release is again marked Urgent and contains the following fixes and enhancements: Fixes: Firmware updated to address CVE-2020-5363 Enhancements: Updated the Embedded Controller Engine Firmware This version 1.7.4 is already available on Fedora 32 via fwupdmgr tool. [root@matht436 ~]# fwupdmgr refresh Fetching signature https://cdn.fwupd.org/downloads/firmware.xml.gz.jcat Downloading… [***************************************] Fetching metadata https://cdn.fwupd.org/downloads/firmware-00558-stable.xml.gz Downloading… [***************************************] Successfully downloaded new metadata: 1 local device supported [root@matht436 ~]# fwupdmgr update • Thunderbolt Controller has no available firmware updates • SSDPEKKF512G8 NVMe INTEL 512GB has no available firmware updates Upgrade available for System Firmware from 1.7.3 to 1.7.4 Latitude 7400 must remain plugged into a power source for the duration of the update to avoid damage. Continue with update? [Y|n]: Downloading 1.7.4 for System Firmware... Fetching firmware https://fwupd.org/downloads/a397a5b5fb47d0411ce59e5a4550940681c741ebf8b601f9c90934e4a7ce4e29-Latitude_7X00_1.7.4.cab Downloading… [***************************************] Less than one minute remaining… Decompressing… [***************************************] Authenticating… [***************************************] Updating System Firmware…[ / ] Scheduling… [***************************************] Successfully installed firmware • Touchpad has no available firmware updates • Unifying Receiver has no available firmware updates An update requires a reboot to complete. Restart now? [y|N]: There was no problem after rebooting. ...

Lenovo just released an updated BIOS firmware version 1.30 for ThinkPad P1 Gen1 on June 3rd. The changes in this v1.30 release are: CHANGES IN THIS RELEASE Version 1.30 [Important updates] - Update includes a security fix. - Address CVE-2020-0529, (https://cve.mitre.org//cgi-bin//cvename.cgi?name=CVE-2020-0529) - Address CVE-2020-0528, (https://cve.mitre.org//cgi-bin//cvename.cgi?name=CVE-2020-0528) [New functions or enhancements] - Updated the Diagnostics module to version 04.12.001. [Problem fixes] - Fixed an issue where USB keyboard connected via Thunderbolt WS Dock might not be used at BIOS POST. This firmware supports both ThinkPad P1 Gen1 and ThinkPad X1 Extreme 1: ...

On May 15, Lenovo released a new BIOS firmware for ThinkPad X1 Carbon Gen 6. The latest of the version of the firmware is 1.48. (There previous version 1.47 was withdrawn for some unknown reason.) Changes in this releases: CHANGES IN THIS RELEASE Version 1.48 [Important updates] - Update includes a security fix. [New functions or enhancements] - Updated the Diagnostics module to version 04.12.001. [Problem fixes] - Fixed an issue where Force PXE boot by Intel AMT does not work. As of today, this new firmware is not yet available via LVFS on Fedora 32. So for those who are impatient like me, we can install this firmware ourselves. Warning: In no way will I be liable if your brick your own machine when you follow this guide! ...

It’s almost exactly one month from the last time Lenovo released (v1.28 of ) the BIOS firmware for ThinkPad P1 Gen 1. Apparently, v1.28 firmware has been marked “Withdrawn” according to this n2eul21w.txt. The changes in this release v1.29 is: CHANGES IN THIS RELEASE Version 1.29 [Important updates] - Addresses CVE-2019-0154 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0154) Refer to Lenovo's Security Advisory page for additional information about LEN-27714 "Multi-vendor BIOS Security Vulnerabilities". (https://support.lenovo.com/us/en/product_security/LEN-27714) [New functions or enhancements] - Updated the CPU microcode. [Problem fixes] - Nothing This firmware supports both ThinkPad P1 Gen1 and ThinkPad X1 Extreme 1 listed below: ...

Dell just released a new system BIOS version 1.7.3 on April 8 for Dell Latitude 7400. This release is marked as Urgent, and comes with the following fixes and enhancements: Fixes: Fixed the issue where the Type-C port works from BIOS Boot Menu with external USB port disabled. Fixed the issue that there is no user interface for wireless connection in BIOS Connect cloud SOS interface. Fixed the issue where the system stops responding on Dell logo when SMM Security mitigation and Secure Boot is enabled. Fixed the issue where the system is not able to update the BIOS from BIOS Boot Menu with SMM Security Mitigation enabled. Enhancements: ...